|
Dr. J. Chander
Rao (victim) got an email
from alleged ICICI Bank
that his account needs
update. When victim
clicked on the link
provided in the email
(one must never do
this…!) it re-directs to
fake ICICI bank Page. As
the Page is a look alike
of ICICI bank Page, the
unassuming victim
entered his username and
password of the bank
account along with his
details asked there.
Within a span of ten
minutes, Rs.5,05,000
were withdrawn from his
account by some unknown
persons in six
transactions and the
amounts were transferred
to various accounts in
ICICI bank accounts
across India. |
|
What is
Phishing? |
|
Phishing is
an attempt
to
criminally
and
fraudulently
acquire
sensitive
information,
such as
usernames,
passwords
and credit
card
details, by
posing as a
trustworthy
site in an
electronic
communication.
Most of the
online banks
are common
targets.
Phishing is
typically
carried out
by e-mail or
instant
messaging,
and often
directs
users to
enter
details at a
website,
although
phone
contact has
also been
used at
times. |
|
Top |
What is
Vishing? |
|
This form of
fishing for
valuable
information
is called “vishing”.
As you’ve
probably
guessed,
it’s a
variation of
the term
“phishing” –
and the V
stands for
Voice. |
|
|
We can
sometimes be
less guarded
when a
phishing
attack comes
through the
phone lines.
|
Have you ever got a
mail like this?
|
|
From: ICICI Bank mailto:ibanking@ICICbank.com
Sent: Tuesday,
June 10, 2008 2:51
AM Subject: ICIC
Online Banking
Customer Alert Account
Notification, You
are receiving this
message, to notify
you about our new
improved online
security software This new secure
socket layer (SSL)
software has just
been newly
implemented to help
secure our valued
customers, from
any form of
unauthorized access
to their account
especially from
different ip's So
we ICICI Bank is
alerting all our
numerous customers
to upgrade their
account to this
secure server
software. my
account activity Customer Service ICICI Bank. (c)
2008 All Rights
Reserved. |
|
Top |
How
to Spot Phishing Emails |
|
It is easy to uncover a
crude phishing scam. For
example, if you get an
email from a bank you’ve
never opened an account
at, then don’t follow
the link and enter your
personal information.
Now, if you actually
have an account at the
institution it gets more
interesting.
You’ll want to look at
the message carefully to
see if it is a phishing
scam. Are words
misspelled? Sometimes
scammers operate in a
second language and they
give themselves away by
using poor grammar.
You should also examine
the link provided. Does
it really go where it
appears to go? The best
way to prevent this is
to bookmark your bank
website as a favorite in
your browser or type the
URL in the address bar
yourself.
The best way to avoid
becoming a phishing scam
victim is to use your
best judgment. No
financial institution
with any sense will
email you and ask you to
input all of your
sensitive information.
In fact, most
institutions are
informing customers that
“We will never ask you
for your personal
information via phone or
email”.
Top |
|